STANDARD DATA DICTIONARY #8989.3 -- KERNEL SYSTEM PARAMETERS FILE                                                 3/24/25    PAGE 1
STORED IN ^XTV(8989.3,  (1 ENTRY)   SITE: WWW.BMIRWIN.COM   UCI: VISTA,VISTA                                       (VERSION 8.0)   

DATA          NAME                  GLOBAL        DATA
ELEMENT       TITLE                 LOCATION      TYPE
-----------------------------------------------------------------------------------------------------------------------------------
This file holds the site parameters for this installation of the Kernel.  It will have only one entry -- the domain name of the
installation site.  Some parameters are defined by the systems manager during the installation process.  These include Agence,
volume set multiple, Default parameters.  Others may be edited subsequent to installation. Spooling, response time, and audit
parameters may be established.  Priorities may be set for interactive users and for TaskMan.  Defaults for fields such as timed 
read, auto menu, and ask device are defined for use when not otherwise specified for a user or device.  



POINTED TO BY: VDEF SYSTEM field (#.01) of the VDEF PARAMETERS File (#579.5) 
               

CROSS
REFERENCED BY: DEFAULT INSTITUTION(AC), LOG RESOURCE USAGE?(AZTCP), MAX SIGNON ALLOWED(AZTM), DOMAIN NAME(B)

    LAST MODIFIED: FEB 16,2024@14:23:27

8989.3,.001   NUMBER                     NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>1)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 17, 1985 
              HELP-PROMPT:      TYPE A WHOLE NUMBER BETWEEN 1 AND 1 
              DESCRIPTION:
                                Used to have VA fileman only have one entry in the file.  

              TECHNICAL DESCR:
                                 


8989.3,.01    DOMAIN NAME            0;1 POINTER TO DOMAIN FILE (#4.2) (Required) (audited)

              INPUT TRANSFORM:  S DINUM=1
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This is the name of this installation of the kernel, as it is known to the rest of the network. It
                                must appear in the DOMAIN file.  This name applies to all CPUs or Volume sets which access this
                                ^XMB global.  

              AUDIT:            YES, ALWAYS
              DELETE TEST:      .01,0)= I 1

              NOTES:            XXXX--CAN'T BE ALTERED EXCEPT BY PROGRAMMER

              CROSS-REFERENCE:  8989.3^B 
                                1)= S ^XTV(8989.3,"B",$E(X,1,30),DA)=""
                                2)= K ^XTV(8989.3,"B",$E(X,1,30),DA)


8989.3,.02    IRM MAIL GROUP         0;2 FREE TEXT (Required)

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<3)!'(X?1"G.".E) X
              LAST EDITED:      FEB 19, 2003 
              HELP-PROMPT:      Answer with the G.MAIL GROUP for system problems. 
              DESCRIPTION:      This field holds the name of the Mail Group that should get messages or bulletns about problems on
                                the system.  


8989.3,.03    AFTER HOURS MAIL GROUP 0;3 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<3)!'(X?1"G.".E) X
              LAST EDITED:      FEB 19, 2003 
              HELP-PROMPT:      Answer with the AFTER HOURS mail group for system problems. 
              DESCRIPTION:      This field holds the name of a mail group that should get messages and bulletins after hours or on
                                weekends and holidays.  


8989.3,.05    MIXED OS               0;5 SET

              Mixed OS   
                                '0' FOR No; 
                                '1' FOR VMS/Linux; 
              LAST EDITED:      JUN 07, 2007 
              DESCRIPTION:      This field tells Kernel that this is a MIXED OS environment.  This is only supported on a Cache ECP
                                client/server setup.  The PRIMARY OS is VMS and the SECONDARY OS is non-VMS.  

              TECHNICAL DESCR:  This is used to select which field to use when selecting OS specific data fields in a mixed OS
                                environment.  The support is for Cache in a ECP client/server mode with only two OS's at a time.  
                                In a mixed environment the primary OS is always VMS, the secondary is not VMS (i.e. Linux or NT) 
                                Some of the fields that need mixed values are DEFAULT HFS DIRECTORY/SECONDARY HFS DIRECTORY 
                                $IO/SECONDARY $I.  


8989.3,.07    LOCAL TMP              0;7 SET

                                '0' FOR No; 
                                '1' FOR Yes; 
              LAST EDITED:      NOV 10, 2010 
              HELP-PROMPT:      Are ^TMP, ^UTILITY, & ^XUTL("XQ") local to each node in a multi-node system as in Cache? 
              DESCRIPTION:      Set this field to Yes if ^TMP, ^UTILITY, and ^XUTL("XQ") are local to each node in a multi-node
                                system as in Cache. Set it to No if everything is clustered together.  
                                 


8989.3,9      AGENCY CODE            0;8 SET (audited)

                                'V' FOR VA; 
                                'AF' FOR AIR FORCE; 
                                'I' FOR IHS; 
                                'ARMY' FOR ARMY; 
                                'N' FOR NAVY; 
                                'O' FOR OTHER; 
                                'E' FOR EHR; 
                                'USCG' FOR COAST GUARD; 
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter the agency type for this site 
              DESCRIPTION:      This field defines what agency uses this computer.  It sets a flag which may be accessed by
                                application programs which need to know this information.  For example, a scheduling program may
                                operate one way in an Air Force environment, and another in a VA environment.  

              AUDIT:            YES, ALWAYS

8989.3,9.8    ROUTINE MONITORING     RM;1 SET (audited)

                                'n' FOR No; 
                                'a' FOR All; 
                                's' FOR Selected; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This field controls how the routine monitoring program behaves.  Weather to look at all routines or
                                just selected name spaces.  

              AUDIT:            YES, ALWAYS

8989.3,9.81   ROUTINE N-SPACE TO MONITOR RM1;0 Multiple #8989.309


8989.309,.01    ROUTINE N-SPACE TO MONITOR 0;1 FREE TEXT (Multiply asked) (audited)

                INPUT TRANSFORM:  K:$L(X)>8!($L(X)<1) X
                LAST EDITED:      DEC 18, 2023 
                HELP-PROMPT:      Answer must be 1-8 characters in length. 
                DESCRIPTION:      If the routine monitoring programm is to look at name spaces then this multipule is the list of
                                  name spaces that it looks at.  An entry like XU* will cause it to look at all routines that start
                                  with XU.  

                AUDIT:            YES, ALWAYS
                CROSS-REFERENCE:  8989.309^B 
                                  1)= S ^XTV(8989.3,DA(1),"RM1","B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),"RM1","B",$E(X,1,30),DA)




8989.3,11     AUTO-GENERATE ACCESS CODES 3;1 SET (audited)

                                'n' FOR NO; 
                                'y' FOR YES; 
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Yes will cause the kernel to generate access codes automatically. 
              DESCRIPTION:      If this field is set to YES, then the user will not be allowed to choose their ACCESS CODE - it
                                will be assigned for them.  

              AUDIT:            YES, ALWAYS

8989.3,11.2   AUTO-GENERATE VERIFY CODES 3;3 SET (audited)

                                'n' FOR No; 
                                'y' FOR Yes; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      During the C&A review of VistA the current practice of leaving the VERIFY CODE blank until the user
                                signed on the first time was found to not comply with VA DIRECTIVE 6504. 
                                 
                                This field will be used when someone other than the user goes to enter a verify code.  The system
                                will select a strong verify code and tell the operator what the new code is.  

              AUDIT:            YES, ALWAYS

8989.3,12     USER CHARACTERISTICS TEMPLATE 3;2 POINTER TO INPUT TEMPLATE FILE (#.402)

              INPUT TRANSFORM:  S DIC("S")="I $P(^(0),U,4)=200" D ^DIC K DIC S DIC=DIE,X=+Y K:Y<0 X
              LAST EDITED:      MAY 23, 1991 
              DESCRIPTION:      This field contains the name of the input template to be used for the EDIT USER CHARACTERISTIC
                                option. If there is a ScreenMan form with the same name it will be used, terminal type permitting.
                                If it is left blank, the XUEDIT CHARACTERISTICS template will be used.  You may want to define 
                                different fields. The TERMINAL TYPE question is asked before the template is called.  

              SCREEN:           S DIC("S")="I $P(^(0),U,4)=200"
              EXPLANATION:      This must be a NEW PERSON FILE template.

8989.3,13     ACADEMIC AFFILIATION WAIVER 3;4 SET

                                '0' FOR No; 
                                '1' FOR Yes; 
              LAST EDITED:      JUN 09, 2009 
              HELP-PROMPT:      Does your site have an Academic Affiliation Waiver. 
              DESCRIPTION:      The VA Handbook 6500 page 60 requires: 6. POLICY AND PROCEDURES, c. Technical Controls, 
                                 (2) Logical Access Controls.  
                                   d. Accounts are automatically disabled if inactive for 30 days.  
                                 
                                The Office of Academic Affiliation requested a waiver to the 30 day disabling of inactive accounts
                                asking it be 90 days and this waiver was approved.  
                                 
                                This field controls if the VA Handbook 6500 30 day limit is used or the site has an Academic
                                Affiliation and the 90 day limit is to be used.  
                                 
                                There is a copy of the waiver attached to Remedy Ticket 283028.  


8989.3,19     OPTION AUDIT           19;1 SET

                                'n' FOR NO AUDIT; 
                                'a' FOR ALL OPTIONS AUDITED; 
                                's' FOR SPECIFIC OPTIONS AUDITED; 
                                'u' FOR USERS AUDITED; 
              LAST EDITED:      MAY 29, 1987 
              DESCRIPTION:      This field indicates what should be audited  between the 'Initiate Audit' 
                                 date and 'Terminate Audit' date fields.  The 'Option to Audit' Subfile 
                                 along with the 'Namespace to Audit' Subfile hold the lists of specific 
                                 options that would be audited (choosing "s").  The 'User to Audit' 


8989.3,19.1   OPTION TO AUDIT        19.1;0 POINTER Multiple #8989.36

              DESCRIPTION:
                                This subfile holds a list of options to audit.  


8989.36,.01     OPTION TO AUDIT        0;1 POINTER TO OPTION FILE (#19) (Multiply asked)

                LAST EDITED:      MAY 29, 1987 
                DESCRIPTION:      This field holds the name of an option that will be audited if the 'Option Audit' Field is set to
                                  "s" (specific options).  

                CROSS-REFERENCE:  8989.36^B 
                                  1)= S ^XTV(8989.3,DA(1),19.1,"B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),19.1,"B",$E(X,1,30),DA)




8989.3,19.2   NAMESPACE TO AUDIT     19.2;0 Multiple #8989.35

              DESCRIPTION:
                                This subfile holds a list of namespaces to audit.  


8989.35,.01     NAMESPACE TO AUDIT     0;1 FREE TEXT (Multiply asked)

                INPUT TRANSFORM:  K:$L(X)>5!($L(X)<1) X
                LAST EDITED:      MAY 29, 1987 
                HELP-PROMPT:      ANSWER MUST BE 1-5 CHARACTERS IN LENGTH 
                DESCRIPTION:      This field holds a package namespace.  All options within that namespace will be audited if the
                                  'Option Audit' Field is set to "s" (selected options).  

                CROSS-REFERENCE:  8989.35^B 
                                  1)= S ^XTV(8989.3,DA(1),19.2,"B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),19.2,"B",$E(X,1,30),DA)




8989.3,19.3   USER TO AUDIT          19.3;0 POINTER Multiple #8989.34

              DESCRIPTION:
                                This subfile holds a list of users to audit.  


8989.34,.01     USER TO AUDIT          0;1 POINTER TO NEW PERSON FILE (#200) (Multiply asked)

                LAST EDITED:      JUN 18, 1991 
                DESCRIPTION:      This field identifies a user whose use of options will be audited if the 'Option Audit' Field is
                                  set to "u" (users audited).  

                CROSS-REFERENCE:  8989.34^B 
                                  1)= S ^XTV(8989.3,DA(1),19.3,"B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),19.3,"B",$E(X,1,30),DA)




8989.3,19.4   INITIATE AUDIT         19;2 DATE

              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:Y<1 X
              LAST EDITED:      MAY 29, 1987 
              DESCRIPTION:      This field indicates the date when an audit will begin.  The 'Option 'Audit' Field defines the
                                nature of the audit that will be performed.  Auditing will only be done if there is both a
                                'Initiate Audit' and 'Terminate Audit' data.  


8989.3,19.5   TERMINATE AUDIT        19;3 DATE

              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:Y<1 X
              DESCRIPTION:
                                This field indicates when the audit will end.  The start date is set in the 'Initiate Audit' Field.  


8989.3,21     NEW PERSON IDENTIFIERS NPI;E1,245 MUMPS (audited)

              INPUT TRANSFORM:  K:$L(X)>245 X D:$D(X) ^DIM
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      This is Standard MUMPS code. To set DR with ID fields. 
              DESCRIPTION:      This field holds MUMPS code to set the variable DR to the string of fields (Not a template) to be
                                used as Identifiers when adding entries to the NEW PERSON file.  
                                 
                                 #9 (SSN) is required if the user does not hold the XUSPF200 key.  
                                 
                                These fields can be added to by the application.  

              AUDIT:            YES, ALWAYS
              WRITE AUTHORITY:  @

8989.3,30.1   CCOW TOKEN TIMEOUT     30;1 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>28800)!(X<600)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a Number between 600 and 28800, 0 Decimal Digits 
              DESCRIPTION:      This field holds the value for how long a CCOW token is good for in seconds. When the current time
                                is greater that the CCOW token create time plus the timeout seconds, the CCOW token will no longer
                                be valid. If this value is too small (short) users will be frustrated that the SSO part doesn't
                                work.  If the value is too large (Long) there is a chance that it could be used to break into the
                                system.  A default value of 5400 (1.5 hours) will be used.  

              AUDIT:            YES, ALWAYS

8989.3,31.1   MAX SPOOL LINES PER USER SPL;1 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>9999999)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a Number between 1 and 9999999 lines of spooled data. 
              DESCRIPTION:      This field holds the MAX number of lines of spooled output any user may spool. If the user has more
                                that this number then they will not be allowed to spool any more until some of their spooled
                                documents are deleted.  This only controls the granting of new spool documents and doesn't
                                terminate a the number of lines that will be transfered into the spool data file.  Recommended
                                value 9999.  

              AUDIT:            YES, ALWAYS
              GROUP:            SPOOL

8989.3,31.2   MAX SPOOL DOCUMENTS PER USER SPL;2 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>999)!(X<0)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a Number between 0 and 999, 0 Decimal Digits 
              DESCRIPTION:      This field limits the number of spooled documents that any user may have on the system.  
                                Recommended value 10-100.  

              AUDIT:            YES, ALWAYS
              GROUP:            SPOOL

8989.3,31.3   MAX SPOOL DOCUMENT LIFE-SPAN SPL;3 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>365)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a Number between 1 and 365, 0 Decimal Digits 
              DESCRIPTION:      This field controls the number of days that a spooled document will be allowed to remain in the
                                spooler before deletion by the XU-SPL-PURGE option that needs to be setup to run in the background.  

              AUDIT:            YES, ALWAYS
              GROUP:            SPOOL

8989.3,32     ALPHA/BETA TEST PACKAGE ABPKG;0 POINTER Multiple #8989.332

              LAST EDITED:      OCT 25, 1990 
              DESCRIPTION:      This multiple field is used to identify any packages which are currently in alpha or beta test at
                                the site.  


8989.332,.01    ALPHA/BETA TEST PACKAGE 0;1 POINTER TO PACKAGE FILE (#9.4) (Multiply asked)

                LAST EDITED:      OCT 25, 1990 
                HELP-PROMPT:      This is a package currently in alpha or beta test status 
                DESCRIPTION:      This field identifies a specific package which was installed as an alpha or beta test of the
                                  package.  

                TECHNICAL DESCR:
                                   

                CROSS-REFERENCE:  8989.332^B 
                                  1)= S ^XTV(8989.3,DA(1),"ABPKG","B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),"ABPKG","B",$E(X,1,30),DA)


8989.332,.02    DATE LAST UPDATED      0;2 DATE

                INPUT TRANSFORM:  S %DT="EX" D ^%DT S X=Y K:Y<1 X
                LAST EDITED:      OCT 25, 1990 
                HELP-PROMPT:      This is the date that the current version of the package was installed 
                DESCRIPTION:      This field contains the date on which the alpha or beta test package was last installed in the
                                  account.  


8989.332,.03    ADRESSEE FOR USAGE REPORTING 0;3 FREE TEXT

                INPUT TRANSFORM:  K:$L(X)>80!($L(X)<5)!'(X?1"G."1U.E1"@"1U.E) X
                LAST EDITED:      NOV 28, 1990 
                HELP-PROMPT:      Answer should be a group addressee network mail format (e.g., G.PKG-TEST@ISC-ANYWHERE) 
                DESCRIPTION:      This field contains a mail group at a domain to which installation and option usage messages are
                                  sent.  This is usually a mail group containing one or more of the developers of the package at
                                  the developing ISC.  

                TECHNICAL DESCR:
                                   


8989.332,.04    VERSION NUMBER         0;4 FREE TEXT

                INPUT TRANSFORM:  K:$L(X)>9!($L(X)<3)!'(X?.E1"T"1N.N!(X?.E1"V"1N.N)) X
                LAST EDITED:      NOV 28, 1994 
                HELP-PROMPT:      This is the current version number and should be a number followed by eitherT or V to indicate 
                                  TEST or VERIFICATION version followed by a number.  Answer must be 3-9 characters in length. 
                DESCRIPTION:      This field contains the current version of the Alpha/Beta Test package.  This value is used to
                                  label some reports to clarify which version of the test package they relate to.  The entry must
                                  contain a number followed by T or V (to indicate a package in Testing or in Verification) 
                                  followed by a number.  


8989.332,.05    DATE ERRORS LAST REPORTED 0;5 DATE

                INPUT TRANSFORM:  S %DT="E" D ^%DT S X=Y K:Y<1 X
                LAST EDITED:      NOV 28, 1994 
                HELP-PROMPT:      This field indicates the date on which error reporting back to the developing ISC was last 
                                  performed. 
                DESCRIPTION:      This field is used to keep track of the last date on which reporting of errors back to the
                                  developing ISC was performed.  The date is used as the starting date for identification of errors
                                  to report.  


8989.332,1      PACKAGE NAMESPACE OR PREFIX 1;0 Multiple #8989.3321

                LAST EDITED:      OCT 25, 1990 
                DESCRIPTION:      This multiple field is used to identify the namespaces or prefixes used to identify the options
                                  and routines associated with the alpha or beta test package.  


8989.3321,.01     PACKAGE NAMESPACE OR PREFIX 0;1 FREE TEXT (Multiply asked)

                  INPUT TRANSFORM:  K:$L(X)>4!($L(X)<2)!'(X?1U.UN) X
                  LAST EDITED:      OCT 25, 1990 
                  HELP-PROMPT:      This is (one of) the 2 to 4 character namespaces or prefixes associated with the test package 
                  DESCRIPTION:
                                    This field identifies one of the alpha/beta package namespaces.  

                  CROSS-REFERENCE:  8989.3321^B 
                                    1)= S ^XTV(8989.3,DA(2),"ABPKG",DA(1),1,"B",$E(X,1,30),DA)=""
                                    2)= K ^XTV(8989.3,DA(2),"ABPKG",DA(1),1,"B",$E(X,1,30),DA)


8989.3321,1       EXCLUDE NAMESPACE OR PREFIX 1;0 Multiple #8989.33211 (Add New Entry without Asking)

                  DESCRIPTION:      This multiple field is used to indicate any specific namespaces or prefixes which begin with
                                    the current namespace or prefix which should be excluded from analyses for the alpha/beta
                                    package.  Generally those namespaces which are immediately followed by the letter 'Z' are
                                    excluded 


8989.33211,.01      EXCLUDE NAMESPACE OR PREFIX 0;1 FREE TEXT (Multiply asked)

                    INPUT TRANSFORM:  K:$L(X)>4!($L(X)<2) X
                    LAST EDITED:      NOV 28, 1990 
                    HELP-PROMPT:      Answer must be 2-4 characters in length. 
                    DESCRIPTION:      This is a specific namespace or prefix which would normally be included as a part of the
                                      alpha/beta package based on the prefix specified for the package, but is to be excluded from
                                      consideration as part of the alpha/ beta package.  For example, one of the prefixes (or for
                                      most packages, XT, yet the prefix XTJ has been set aside for another, related but 
                                      independent, purpose.  The package prefix could be specified as XT, with XTJ specified as an
                                      entry in this 'exclude namespace or prefix' field.  

                    CROSS-REFERENCE:  8989.33211^B 
                                      1)= S ^XTV(8989.3,DA(3),"ABPKG",DA(2),1,DA(1),1,"B",$E(X,1,30),DA)=""
                                      2)= K ^XTV(8989.3,DA(3),"ABPKG",DA(2),1,DA(1),1,"B",$E(X,1,30),DA)








8989.3,33     ALPHA,BETA TEST OPTION ABOPT;0 POINTER Multiple #8989.333

              DESCRIPTION:      This is a multiple field which is used to keep a log of usage of the options associated with an
                                alpha or beta test of a package based on the namespace(s) indicated for the alpha or beta test
                                package.  

              TECHNICAL DESCR:
                                 


8989.333,.01    ALPHA,BETA TEST OPTION 0;1 POINTER TO OPTION FILE (#19) (Multiply asked)

                INPUT TRANSFORM:  S DINUM=X Q
                LAST EDITED:      NOV 30, 1990 
                HELP-PROMPT:      This is an option associated with a namespace currently in alpha or beta test 
                DESCRIPTION:      This field identifies one option in alpha or beta test package which has been used since the last
                                  package installation.  

                TECHNICAL DESCR:
                                   

                NOTES:            XXXX--CAN'T BE ALTERED EXCEPT BY PROGRAMMER


8989.333,.02    ACCESSES SINCE LAST UPDATE 0;2 NUMBER

                INPUT TRANSFORM:  K:+X'=X!(X>99999999999)!(X<0)!(X?.E1"."1N.N) X
                LAST EDITED:      OCT 25, 1990 
                HELP-PROMPT:      This is the number of times that this option has been selected since the last update was 
                                  installed. 
                DESCRIPTION:      This field is a count of the number of accesses to the alpha or beta test package option
                                  identified in field .01 since the last package installation.  

                TECHNICAL DESCR:
                                   




8989.3,41     VOLUME SET             4;0 Multiple #8989.304

              LAST EDITED:      MAY 04, 1990 
              DESCRIPTION:
                                This is the set of all CPU names in this domain.  


8989.304,.01    VOLUME SET             0;1 FREE TEXT (Multiply asked) (audited)

                INPUT TRANSFORM:  K:X[""""!($A(X)=45) X I $D(X) K:$L(X)>9!($L(X)<2)!'(X?.U) X
                                9.2 = I ($D(^XTV(8989.3,"AT",XUZTOX))\10) S %X="^XTV(8989.3,""AT"","""_XUZTOX_""",",%Y="^XTV(8989.3
                                ,""AT"","""_X_"""," D %XY^%RCR K ^XTV(8989.3,"AT",XUZTOX)
                LAST EDITED:    DEC 18, 2023 
                HELP-PROMPT:    Answer with the name of other CPUs or Volume sets, or Directories. 
                DESCRIPTION:
                                This is the name of each CPU or VOLUME SET in the domain.  

                EXECUTABLE HELP:W !,"Your answer must be unique."
                AUDIT:          YES, ALWAYS
                CROSS-REFERENCE:8989.304^B 
                                1)= S ^XTV(8989.3,DA(1),4,"B",$E(X,1,30),DA)=""
                                2)= K ^XTV(8989.3,DA(1),4,"B",$E(X,1,30),DA)


8989.304,2      MAX SIGNON ALLOWED   0;3 NUMBER (audited)

                INPUT TRANSFORM:K:+X'=X!(X>10000)!(X<0)!(X?.E1"."1.N) X
                LAST EDITED:    DEC 18, 2023 
                HELP-PROMPT:    Type a number between 0 and 10000, 0 Decimal Digits 
                DESCRIPTION:    This field defines the maximum number of jobs that XUS or RPC Broker will allow to sign-on to this
                                VOLUME SET or CPU.  

                AUDIT:          YES, ALWAYS
                CROSS-REFERENCE:8989.3^AZTM^MUMPS 
                                1)= Q
                                2)= Q


8989.304,6      LOG SYSTEM RT?       0;6 SET (audited)

                                'y' FOR YES; 
                                'n' FOR NO; 
                LAST EDITED:    DEC 18, 2023 
                HELP-PROMPT:    ENABLE SYSTEM RESPONSE TIME LOGGING? (Y/N): NO// 
                DESCRIPTION:    Setting this field to YES enables system response time logging, which will only take place if the
                                necessary code exists in the application software.  

                AUDIT:          YES, ALWAYS



8989.3,51     DNS IP                 DNS;1 FREE TEXT (audited)

              INPUT TRANSFORM:  K:$L(X)>75!($L(X)<7)!'(X?1.(1.3N1"."1.3N1"."1.3N1"."1.3N.1",")) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Answer must be 7-75 characters in length. 
              DESCRIPTION:      This field holds the IP addresses of the DNS(s) that XLFNSLK will use.  Data must be in the form of
                                nnn.nnn.nnn.nnn To list more that one separate them with commas (,).  

              AUDIT:            YES, ALWAYS

8989.3,53.1   PKI Server             IP1;1 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>46!($L(X)<7) X
              LAST EDITED:      NOV 15, 2001 
              HELP-PROMPT:      Answer must be 7-46 characters in length 
              DESCRIPTION:      This field holds one to three IP addresses for the PKI servers for this site.  Each IP address is
                                separated by comas.  Example: 127.0.0.1,PKI.fo-oakland.domain.ext 


8989.3,101    PATH TO MWAPI BITMAPS  101;1 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>100!($L(X)<2) X
              LAST EDITED:      JUL 08, 1994 
              HELP-PROMPT:      Answer must be 2-100 characters in length. 

8989.3,200.1  SECURITY TOKEN SERVICE 200;1 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>60!($L(X)<3) X
              LAST EDITED:      SEP 16, 2015 
              HELP-PROMPT:      Issuer of security token. Answer must be 3-60 characters in length. 
              DESCRIPTION:      When using brokered authentication with a security token issued by a Security Token Service (STS),
                                this field will contain the identification of the issuer of the token. The STS is trusted by both
                                the client and the service to provide interoperable security tokens.  
                                 
                                Security Assertion Markup Language (SAML) tokens are standards-based XML tokens that are used to
                                exchange security information, including attribute statements, authentication decision statements,
                                and authorization decision statements. They can be used as part of a Single Sign-On (SSO) solution
                                allowing a client to talk to services running on disparate technologies.  


8989.3,200.2  ORGANIZATION           200;2 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<3) X
              LAST EDITED:      SEP 16, 2015 
              HELP-PROMPT:      Name of Organization (owner of this VistA instance). Answer must be 3-50 characters in length. 
              DESCRIPTION:      Identity and Access Management ORGANIZATION field used to identify the Organization of this VistA
                                instance. For internally authenticated users, this field will match the SUBJECT ORGANIZATION field
                                (#205.2) of the user identified in the NEW PERSON file (#200). For the VA, this field should always
                                contain the value: "Department Of Veterans Affairs" 


8989.3,200.3  ORGANIZATION ID        200;3 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<1) X
              LAST EDITED:      SEP 16, 2015 
              HELP-PROMPT:      ID of Organization (owner of this VistA instance). Answer must be 1-50 characters in length. 
              DESCRIPTION:      Identity and Access Management ORGANIZATION ID field used to uniquely identify the Organization of
                                this VistA instance. For internally authenticated users, this field will match the SUBJECT
                                ORGANIZATION ID field (#205.3) of the user identified in the NEW PERSON file (#200). For the VA,
                                this field should always contain the value: "urn:oid:2.16.840.1.113883.4.349" 


8989.3,202    DEFAULT # OF ATTEMPTS  XUS;2 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>5)!(X<1)!(X?.E1"."1.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a integer between 1 and 5. 
              DESCRIPTION:      This is the default number of attempts that a user may try to sign-on before the device is locked.
                                This field is overridden by a similar field in the DEVICE File. This means that during sign-on the
                                checks against the device file for OUT OF SERVICE, SECURITY, and PROHIBITED TIMES FOR SIGN-ON will
                                be skipped.  The maximum value (5) is set by the VA INFORMATION SYSTEM ACCOUNT AND PASSWORD
                                MANAGEMENT POLICY.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,203    DEFAULT LOCK-OUT TIME  XUS;3 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>9999)!(X<600)!(X?.E1"."1.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a integer between 600 and 9999. 
              DESCRIPTION:      This is the default time in seconds that a locked device must be idle before another sign-on
                                attempt will be allowed. This time is overridden by a similar field in the DEVICE File. This means
                                that during sign-on the checks against the device file for OUT OF SERVICE, SECURITY, and PROHIBITED
                                TIMES FOR SIGN-ON will be skipped.  The minimum value is set by the VA INFORMATION SYSTEM ACCOUNT
                                AND PASSWORD MANAGEMENT POLICY.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,204    DEFAULT MULTIPLE SIGN-ON XUS;4 SET (audited)

                                '0' FOR NO; 
                                '1' FOR YES; 
                                '2' FOR Only one IP; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This is the default value for whether users may sign-on at more than one terminal at a time. It is
                                overridden by similar fields in the DEVICE and NEW PERSON Files. If you select "Only one IP" be
                                sure to put a value into the "MULTIPLE SIGN-ON LIMIT" field so users can sign-on at least once.  
                                Current Values 0 = Multiple signon not allowed.  1 = Multiple signon Allowed.  2 = Multiple sign
                                only allowed from one IP address.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,205    ASK DEVICE TYPE AT SIGN-ON XUS;5 SET (audited)

                                '0' FOR NO; 
                                '1' FOR YES; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This is the default for whether a user/terminal should be asked for their terminal type at sign-on.
                                This is overridden by a similar field in the DEVICE and NEW PERSON Files.  
                                 
                                terminals DEVICE ATTRIBUTES message, if it is a know one then the terminal type is set to this.
                                Otherwise the user is prompted.  
                                 
                                If set to NO then the one from the Last Sign-on field or device subtype will will be used.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,206    DEFAULT AUTO-MENU      XUS;6 SET (audited)

                                '0' FOR NO; 
                                '1' FOR YES; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This is the default for whether auto-menu is turned ON or OFF.  It is overridden by similar fields
                                in the DEVICE and NEW PERSON Files.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,207    DEFAULT LANGUAGE       XUS;7 POINTER TO LANGUAGE FILE (#.85) (audited)

              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This field points to the default language that is used by the site.  The value can be replaced by a
                                language field in the New Person file (200.07).  

              AUDIT:            YES, ALWAYS

8989.3,209    DEFAULT TYPE-AHEAD     XUS;9 SET (audited)

                                'N' FOR NO; 
                                'Y' FOR YES; 
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter 'YES' if user should be allowed to pre-type answers 
              DESCRIPTION:      This is the default as to whether or not Type-Ahead is allowed.  It is overridden by similar fields
                                in the DEVICE and NEW PERSON Files.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,210    DEFAULT TIMED-READ (SECONDS) XUS;10 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>99999)!(X<20)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      TYPE A WHOLE NUMBER BETWEEN 20 AND 99999 
              DESCRIPTION:      This is the default time-out for all READs and is overridden by similar fields in the DEVICE and
                                NEW PERSON Files.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,211    BYPASS DEVICE LOCK-OUT XUS;11 SET (audited)

                                '0' FOR NO; 
                                '1' FOR YES; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      Setting this field to YES will cause all device lock-out checking to be bypassed.  This means that
                                during sign-on the checks against the device file for OUT OF SERVICE, SECURITY, and PROHIBITED
                                TIMES FOR SIGN-ON will be skipped.  Can be overridden by the PERFORM DEVICE CHECKING field in the 

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,212    RESERVED               XUS;12 SET

                                '0' FOR NO; 
                                '1' FOR YES; 
              LAST EDITED:      JAN 25, 1994 
              DESCRIPTION:
                                *** This field is NO longer used. *** 


8989.3,212.1  DEVICE TO AUDIT        8989.33;0 POINTER Multiple #8989.33

              DESCRIPTION:
                                If device auditing is activated, This holds a list of devises that are to be audited.  


8989.33,.01     DEVICE TO AUDIT        0;1 POINTER TO DEVICE FILE (#3.5) (Multiply asked)

                OUTPUT TRANSFORM: I $D(^%ZIS(1,Y,0)) S Y=$P(^%ZIS(1,Y,0),U,1)
                LAST EDITED:      SEP 02, 1987 
                DESCRIPTION:      This field is referenced when the FAILED ACCESS ATTEMPT AUDIT field is set to 'D' or 'DR'.  It is
                                  used to specify the logical names of the devices on which to audit failed attempts.  

                CROSS-REFERENCE:  8989.33^B 
                                  1)= S ^XTV(8989.3,DA(1),8989.33,"B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),8989.33,"B",$E(X,1,30),DA)




8989.3,212.5  FAILED ACCESS ATTEMPT AUDIT XUS;14 SET

                                'A' FOR ALL DEVICES/NO TEXT RECORDED; 
                                'D' FOR SPECIFIED DEVICES/NO TEXT RECORDED; 
                                'AR' FOR ALL DEVICES/TEXT RECORDED; 
                                'DR' FOR SPECIFIED DEVICES/TEXT RECORDED; 
                                'N' FOR NO AUDIT; 
              DESCRIPTION:      This field indicates whether an audit log is to be generated for failed access attempts.  Audits
                                can be done for all devices or specified devices only.  Recording of what is entered is optional.  


8989.3,213    RESERVED               XUS;13 SET

                                '0' FOR NO; 
                                '1' FOR YES; 
              LAST EDITED:      JAN 25, 1994 
              DESCRIPTION:      This field is reserved for future use.  
                                 


8989.3,214    LIFETIME OF VERIFY CODE XUS;15 NUMBER (Required) (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>90)!(X<1)!(X?.E1"."1.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a number between 1 and 90. 
              DESCRIPTION:      This is the number of days that a VERIFY code remains valid.  After this time the user must choose
                                a new VERIFY code.  

              AUDIT:            YES, ALWAYS
              GROUP:            XUS

8989.3,216    INTERACTIVE USER'S PRIORITY XUS;16 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>10)!(X<0)!(X?.E1"."1N.N) X I $D(X),(X>0)&(X<10) W *7,"  This may cause poor system respo
                                nse for users"
              LAST EDITED:      MAR 14, 1989 
              HELP-PROMPT:      If a value of 1-10 this will be the priority of interactive users. 
              DESCRIPTION:      This field will change the priority of interactive users on the system at sign-on time.  There is a
                                danger that using this field will cause the users to have poor response time from the computer.  

              GROUP:            XUS
              NOTES:            XXXX--CAN'T BE ALTERED EXCEPT BY PROGRAMMER


8989.3,217    DEFAULT INSTITUTION    XUS;17 POINTER TO INSTITUTION FILE (#4) (Required) (audited)

              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter the instutition to use as a default for uses without one. 
              DESCRIPTION:      This field is used to define a default institution that will be assigned as the user's institution
                                (DUZ(2)) for any user that doesn't have one.  
                                 
                                Other Developers are allowed to get this data directly from the 

              AUDIT:            YES, ALWAYS
              CROSS-REFERENCE:  8989.3^AC^MUMPS 
                                1)= I $D(^DD(4.3,217,0)) S $P(^XMB(1,1,"XUS"),U,17)=$P(^XTV(8989.3,1,"XUS"),U,17)
                                2)= I $D(^XMB(1,1,"XUS")) S $P(^XMB(1,1,"XUS"),U,17)=""
                                3)= This is to keep files 4.3 and 8989.3 in sync.
                                This will keep the default institution in sync between the old Kernel site parametere file 4.3 and
                                the new on file 8989.3.  



8989.3,218    DEFAULT AUTO SIGN-ON   XUS;18 SET (audited)

                                '0' FOR No; 
                                '1' FOR Yes; 
                                'd' FOR Disabled; 
              LAST EDITED:      DEC 18, 2023 
              DESCRIPTION:      This field will control the Auto Sign-on (Single Sign-on) feature.  
                                 
                                To completely turn off this feature for all users: set to DISABLED.  To allow only selected users:
                                set to No.  To allow ALL but selected users: set to Yes.  
                                 
                                The Yes and No values can be over ridden by the AUTO SIGN-ON field in the New Person file.  Use of
                                this feature impacts user connecting via Telnet and the Broker.  

              AUDIT:            YES, ALWAYS

8989.3,219    DEFAULT MULTIPLE SIGN-ON LIMIT XUS;19 NUMBER (audited)

              Multiple Sign-On Limit   
              INPUT TRANSFORM:  K:+X'=X!(X>100)!(X<1)!(X?.E1"."1.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a number between 1 and 100, 0 Decimal Digits 
              DESCRIPTION:      This field sets an upper limit on the number of concurrent sessions that one user can have from one
                                IP address when the Multiple Sign-on field (#204) is set to "One IP" 

              AUDIT:            YES, ALWAYS

8989.3,220    STRICT TOKEN VALIDATION XUS;20 SET (BOOLEAN Data Type) (audited)

              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter YES or NO to apply strict token validation. Default is NO 
              DESCRIPTION:      This field is used to apply strict credential token validation by Kernel during sign-on. Default is
                                NO strict token validation.  
                                 
                                WARNING: use of STRICT token validation may cause problems with users signing on to VistA if the
                                required infrastructure is not properly setup.  

              AUDIT:            YES, ALWAYS

8989.3,221    SIGN-ON LOG RETENTION  XUS;21 NUMBER

              SIGN-ON LOG RETENTION (DAYS)   
              INPUT TRANSFORM:  K:+X'=X!(X>9999)!(X<365)!(X?.E1"."1N.N) X
              LAST EDITED:      OCT 24, 2023 
              HELP-PROMPT:      Enter the number of days to retain data in the Sign-on log. Type a number between 365 and 9999, 0 
                                decimal digits. 
              DESCRIPTION:      This field entry determines the number of days to retain data in the SIGN-ON LOG. The purging
                                scheduling option should run and should protect sign-on log entries for at least the number of days
                                provided here. The minimum value is 365 days and the maximum value is 9999 days. Note that larger
                                values will consume more disk space. 


8989.3,230    BROKER ACTIVITY TIMEOUT XWB;1 NUMBER (audited)

              INPUT TRANSFORM:  K:+X'=X!(X>36000)!(X<30)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Type a Number between 30 and 36000, 0 Decimal Digits 
              DESCRIPTION:      This field controls how long the Broker server waits (in seconds) for some activity from the
                                client. Its value is passed to client applications compiled with version 1.1*6 and above of the
                                Broker. The client application will contact ("poll") the server at an interval based on this 
                                field's value to let the server know it is still there. If a client stops polling the server, the
                                server knows that the client process has terminated. The "ghost" server job is therefore stopped,
                                enabling locks and other resources to be freed. A small timeout value in this field creates more
                                server and network activity. A large value leaves ghost jobs on the server longer. We recommend
                                setting it to a value of 180 seconds as a good compromise.  

              AUDIT:            YES, ALWAYS

8989.3,231    GUI POST SIGN-ON       XWB;2 SET

                                '0' FOR Don't Send/Show; 
                                '1' FOR Send/Show; 
              LAST EDITED:      APR 19, 2005 
              DESCRIPTION:      This field will control if the POST SIGN-ON message is sent to the GUI client.  If it is sent then
                                the GUI client should display the message before allowing the user to continue.  


8989.3,240    INTRO MESSAGE          INTRO;0   WORD-PROCESSING #8989.324   (NOWRAP)

              LAST EDITED:      JUN 30, 1994 
              DESCRIPTION:      This field holds the text that is initially displayed at signon, before the prompt for access code
                                or other checking.  


                LAST EDITED:      JUL 27, 1989 
                HELP-PROMPT:      This text is displayed as an intro before any checking. 
                DESCRIPTION:      This field holds the text that is initially displayed at signon, before the prompt for access
                                  code or other checking.  

                TECHNICAL DESCR:  The current location is ^XTV(8989.3,1,"INTRO", referencing this field.  The previous location was
                                  ^XMB("MGR","INTRO", which did not correspond to any field in a file.  The XUSERINT option, an
                                  action type, is used now, as in the past, to edit introductory text.  




8989.3,245    POST SIGN-IN MESSAGE   POST;0   WORD-PROCESSING #8989.3245   (NOWRAP)

              DESCRIPTION:
                                This field holds the text that is displayed after the user has successfully passed the signon.  


                LAST EDITED:      JUN 30, 1994 



8989.3,250    PEER SYSTEMS           PEER;1 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>245!($L(X)<7)!'(X?1.(1.3N1"."1.3N1"."1.3N1"."1.3N.1",")) X
              LAST EDITED:      SEP 15, 2008 
              HELP-PROMPT:      Enter a list of IP addresses separated by commas. 
              DESCRIPTION:      This field holds a list of IP addresses that the GETPEER function will not pass back from the API. 
                                It is set to 127.0.0.1 by default.  


8989.3,300    LOG RESOURCE USAGE?    XUCP;1 SET

                                'Y' FOR YES; 
                                'N' FOR NO; 
              LAST EDITED:      OCT 19, 1992 
              DESCRIPTION:       This Yes/No field is used to indicate whether resource usage data such as CPU seconds, DIO, BIO,
                                etc. will be collected in ^XUCP(.  If this field is set to "YES", every time a user goes in and out
                                of an option and each time recorded.  

              CROSS-REFERENCE:  8989.3^AZTCP^MUMPS 
                                1)= D SET^XUTMG43
                                2)= D KILL^XUTMG43
                                3)= Needed to notify TaskMan when field changes.
                                This cross-reference updates TaskMan whenever the field changes.  The code that supports this
                                cross-reference loops through the Volume Set file.  For those with link access that are not out of 
                                service, it adjusts the LOGRSRC node to indicate whether or not what has changed.  



8989.3,320    PRIMARY HFS DIRECTORY  DEV;1 FREE TEXT (audited)

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<1) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter a directory path for HFS files (1-50 char) 
              DESCRIPTION:      This field holds a Primary (default) directory path to be used whenever a HOST file is referenced
                                and a Directory is not included.  Example: Cache/VMS might have USER$:[TEMP] 
                                         Cache/NT might have T:\TEMP\ 
                                         Cache/Linux might have /var/tmp/ If this field is left blank then HOST files that don't
                                have an explicit directory path will go to the current processes working directory.  

              AUDIT:            YES, ALWAYS

8989.3,320.2  SECONDARY HFS DIRECTORY DEV;2 FREE TEXT (audited)

              INPUT TRANSFORM:  K:$L(X)>50!($L(X)<1) X
              LAST EDITED:      DEC 18, 2023 
              HELP-PROMPT:      Enter a directory path for HFS files (1-50 char) 
              DESCRIPTION:
                                This field holds the secondary HFS directory path.  

              AUDIT:            YES, ALWAYS

8989.3,321.01 FACILITY ISO           321;1 POINTER TO NEW PERSON FILE (#200)

              INPUT TRANSFORM:  S DIC("S")="I $$ACTIVE^XUSER(+Y)>0" D ^DIC K DIC S DIC=$G(DIE),X=+Y K:Y<0 X
              LAST EDITED:      JAN 30, 2008 
              HELP-PROMPT:      Select the Facility Information Security Officer 
              DESCRIPTION:      This field holds a pointer to the facility Information Security Officer in the NEW PERSON file
                                (#200).  

              SCREEN:           S DIC("S")="I $$ACTIVE^XUSER(+Y)>0"
              EXPLANATION:      ONLY AN ACTIVE USER MAY BE SELECTED

8989.3,321.02 FACILITY CIO           321;2 POINTER TO NEW PERSON FILE (#200)

              INPUT TRANSFORM:  S DIC("S")="I $$ACTIVE^XUSER(+Y)>0" D ^DIC K DIC S DIC=$G(DIE),X=+Y K:Y<0 X
              LAST EDITED:      JAN 30, 2008 
              HELP-PROMPT:      Enter the name of the Facility CIO. 
              DESCRIPTION:
                                This field holds a pointer to the facility CIO in the NEW PERSON file (#200) 

              SCREEN:           S DIC("S")="I $$ACTIVE^XUSER(+Y)>0"
              EXPLANATION:      ONLY AN ACTIVE USER MAY BE SELECTED

8989.3,405.1  IP SECURITY ON         405;1 SET

                                'n' FOR No; 
                                'y' FOR Yes; 
              LAST EDITED:      JUL 28, 2003 
              DESCRIPTION:
                                This field turns on or off the IP security "Three strikes and you are out" code.  


8989.3,405.12 FAILED ATTEMPTS LIMIT - IRM 405;2 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>1000)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      MAR 24, 2004 
              HELP-PROMPT:      Type a Number between 1 and 1000, 0 Decimal Digits 
              DESCRIPTION:      This field holds the value of how many Failed Attempts must be counted by the XUSFACHK routine
                                before a message is sent to the IRM during normal business hours (8:00 am to 4:30 pm).  This can be
                                change by the value in the TOTAL COUNT INCREASE field.  


8989.3,405.13 FAILED ATTEMPTS LIMIT - AOD 405;3 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>1000)!(X<1)!(X?.E1"."1.N) X
              LAST EDITED:      MAR 24, 2004 
              HELP-PROMPT:      Type a number between 1 and 1000, 0 Decimal Digits 
              DESCRIPTION:      This field holds the value of how many Failed Attempts must be counted by the XUSFACHK routine
                                before a message is sent to the AOD during after hours (4:30 pm to 8:00 am).  This can be changed
                                by the value in the TOTAL COUNT INCREASE field.  


8989.3,405.14 USER LOCKING           405;4 SET

                                'n' FOR No; 
                                'y' FOR Yes; 
              LAST EDITED:      NOV 19, 2002 
              DESCRIPTION:      This field controls if Users are locked out of the system because of exceeding the limit on bad
                                attempts.  The ACCESS code must be correct so we can identify the user, and it is just the VERIFY
                                code that is being entered wrong.  


8989.3,405.15 LAST RUN FAILED ATTEMPTS CHECK 405;5 DATE

              INPUT TRANSFORM:  S %DT="ESTX" D ^%DT S X=Y K:X<1 X
              LAST EDITED:      FEB 19, 2003 
              HELP-PROMPT:      (No range limit on date) 
              DESCRIPTION:      This field holds the date time of the last run of the FAILED ATTEMPTS checking routine (XUSFACHK).  
                                This field is filled in by the routine and doesn't need user entry.  


8989.3,405.16 DEFAULT TS SLACK       405;6 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>99)!(X<0)!(X?.E1"."1.N) X
              LAST EDITED:      MAR 24, 2004 
              HELP-PROMPT:      Type a number between 0 and 99, 0 Decimal Digits 
              DESCRIPTION:      This field holds a default value for how many times in 10 minutes a Terminal Server can have a
                                sign-on failure (entries in the FAILED ACCESS ATTEMPTS LOG) before it is locked.  A default value
                                is 2 is used if no value is entered.  


8989.3,405.17 KEEP THRESHOLD         405;7 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>9999)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      OCT 15, 2003 
              HELP-PROMPT:      Type a Number between 1 and 9999, 0 Decimal Digits 
              DESCRIPTION:      This field holds the number of Failed Access Attempts in the current sample period that will cause
                                the count to be saved for the next sample period.  This is used by the routine XUSFACHK and the
                                value will need to be smaller for a more frequent running and larger for less frequent running. A
                                starting value could be 10 if XUSFACHK is scheduled to run every 30 minutes.  


8989.3,405.18 TOTAL COUNT INCREASE   405;8 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>9999)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      OCT 15, 2003 
              HELP-PROMPT:      Type a Number between 1 and 9999, 0 Decimal Digits 
              DESCRIPTION:      This field holds the value to be added to the IRM or AOD limits.  If the total number of Failed
                                Access Attempts in the sample period is greater than the IRM (or AOD) limit plus the TOTAL COUNT
                                INCREASE then it will trigger the sending of the failed attempts message.  


8989.3,405.2  TERMINAL SERVER IP     405.2;0 Multiple #8989.305


8989.305,.01    TERMINAL SERVER IP     0;1 FREE TEXT (Multiply asked)

                INPUT TRANSFORM:  K:$L(X)>40!($L(X)<7) X
                LAST EDITED:      OCT 28, 2002 
                HELP-PROMPT:      Answer must be 7-40 characters in length. 
                DESCRIPTION:      This field holds the IP addresses of Terminal servers that should get special treatment from the
                                  IP security software.  

                CROSS-REFERENCE:  8989.305^B 
                                  1)= S ^XTV(8989.3,DA(1),405.2,"B",$E(X,1,30),DA)=""
                                  2)= K ^XTV(8989.3,DA(1),405.2,"B",$E(X,1,30),DA)


8989.305,1      AFTER HOURS SLACK      0;2 NUMBER

                Slack   
                INPUT TRANSFORM:  K:+X'=X!(X>300)!(X<0)!(X?.E1"."1.N) X
                LAST EDITED:      MAR 24, 2004 
                HELP-PROMPT:      Type a number between 0 and 300, 0 Decimal Digits 
                DESCRIPTION:      This field holds the after hours slack value use to delay locking the Terminal Server address.  
                                  Between the hours of 4:30 pm and 8:00 am, If the FAILED ACCESS ATTEMPTS LOG has had more entries
                                  from this Terminal Server in the last 10 minutes than the slack value the TS IP address will be
                                  locked.  


8989.305,2      LAST TIME RESET        0;3 DATE

                INPUT TRANSFORM:  S %DT="ESTX" D ^%DT S X=Y K:Y<1 X
                LAST EDITED:      NOV 14, 2002 
                DESCRIPTION:
                                  This field holds the FileMan date time that the LOCK on this Terminal Server was last cleared.  




8989.3,501    PRODUCTION             SID;1 SET (Required)

              Production   
                                '0' FOR No; 
                                '1' FOR Yes; 
              LAST EDITED:      OCT 22, 2003 
              DESCRIPTION:      This field holds a flag to indicate if this is a Production account.  It is a Yes/No flag with
                                internal values of 1 = Yes, 0 = No.  It is set by the system after comparing the System ID with the
                                current System ID, at some point in the future will be checked against a master system.  


8989.3,502    System ID              SID;2 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>100!($L(X)<8) X
              LAST EDITED:      OCT 22, 2003 
              HELP-PROMPT:      Answer must be 8-100 characters in length 
              DESCRIPTION:      This field holds the SYSTEM ID, if this is a production system.  This value is compared with the
                                current system value and at some point in the future will be checked against a master system.  


8989.3,503    SID LAST CHECKED       SID;3 DATE

              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:Y<1 X
              LAST EDITED:      OCT 22, 2003 
              DESCRIPTION:      This field holds the date/time that the SID was last checked.  If the SID has not been compared
                                with the stored one today a full check will be done, otherwise the PROD api will just return the
                                current value.  


8989.3,504    LOGICAL DISK NAME      SID;4 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>30!($L(X)<2) X
              LAST EDITED:      JUL 31, 2007 
              HELP-PROMPT:      Answer must be 2-30 characters in length. 
              DESCRIPTION:      This field holds a logical disk name that is stored in the cache cpf file for client system in a
                                ECP client-server setup.  


8989.3,505    PHYSICAL DISK          SID;5 FREE TEXT

              INPUT TRANSFORM:  K:$L(X)>30!($L(X)<2) X
              LAST EDITED:      JUL 31, 2007 
              HELP-PROMPT:      Answer must be 2-30 characters in length. 
              DESCRIPTION:
                                This field hold the Physical disk name that Cache VMS converts the logical name(#504) in to.  


8989.3,520.1  ERROR LIMIT            ZTER;1 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>1000)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      DEC 18, 2007 
              HELP-PROMPT:      Type a Number between 1 and 1000, 0 Decimal Digits 
              DESCRIPTION:      This field holds the maximum number of a particular error to be recorded on one day. The count will
                                continue in the ERROR SUMMARY file (#3.077) field FREQUENCY (#4) even though the error is not
                                recorded in the error trap.  It is used in the $$SCREEN^%ZTER logic to tell the error trap to skip
                                recording the error.  


8989.3,520.2  SEND ERROR SUMMARY     ZTER;2 SET

                                '0' FOR No; 
                                '1' FOR Yes; 
              LAST EDITED:      AUG 05, 2009 
              DESCRIPTION:      This field controls if the error summary routine sends a record to a consolidating facility when it
                                has finished running.  The mail message is sent to the mail group XTER SUMMARY LOAD.  In the VA
                                this will include the remote entry G.XTER SUMMARY LOAD@DOMAIN.EXT.  


8989.3,520.3  KEEP ERROR TRAP        ZTER;3 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>99999)!(X<1)!(X?.E1"."1N.N) X
              LAST EDITED:      MAY 27, 2010 
              HELP-PROMPT:      Type a number between 1 and 99999. Days to keep detail Error Trap. 
              DESCRIPTION:      This field holds the number of days to keep the entries in the Detail Error Trap.  Defaults to 7 if
                                left blank.  


8989.3,520.4  KEEP ERROR SUMMARY     ZTER;4 NUMBER

              INPUT TRANSFORM:  K:+X'=X!(X>99999)!(X<7)!(X?.E1"."1N.N) X
              LAST EDITED:      MAY 27, 2010 
              HELP-PROMPT:      Type a number between 7 and 99999. Days to keep the Error Summary. 
              DESCRIPTION:      This field holds the number of days to keep the entries in the Error Trap Summary since they were
                                last seen. Defaults to 90 if left blank.  


8989.3,900    New Person Enumeration Started MPI;1 DATE

              New Person file Enumeration Start Date   
              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:X<1 X
              LAST EDITED:      AUG 04, 2010 
              HELP-PROMPT:      (No range limit on date) 
              DESCRIPTION:
                                This field will note when the New Person File (#200) began the VPID Enumeration Process.  


8989.3,901    PAID Enumeration Started MPI;2 DATE

              PAID Employee File Enumeration Started   
              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:X<1 X
              LAST EDITED:      AUG 04, 2010 
              HELP-PROMPT:      (No range limit on date) 
              DESCRIPTION:
                                This field will note when the PAID EMPLOYEE (#450) file began the VPID Enumeration Process.  


8989.3,902    New Person Enumeration Finish MPI;3 DATE

              New Person Enumeration Finish Date   
              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:X<1 X
              LAST EDITED:      AUG 04, 2010 
              HELP-PROMPT:      (No range limit on date) 
              DESCRIPTION:
                                This field will note when the New Person (#200) file completed the VPID Enumeration Process.  


8989.3,903    PAID Enumeration Finish MPI;4 DATE

              PAID Enumeration Finished   
              INPUT TRANSFORM:  S %DT="ETX" D ^%DT S X=Y K:X<1 X
              LAST EDITED:      AUG 04, 2010 
              HELP-PROMPT:      (No range limit on date) 
              DESCRIPTION:
                                This field will note when the PAID EMPLOYEE (#450) file completed the VPID Enumeration Process.  



      FILES POINTED TO                      FIELDS

DEVICE (#3.5)                     DEVICE TO AUDIT:DEVICE TO AUDIT (#.01)

DOMAIN (#4.2)                     DOMAIN NAME (#.01)

INPUT TEMPLATE (#.402)            USER CHARACTERISTICS TEMPLATE (#12)

INSTITUTION (#4)                  DEFAULT INSTITUTION (#217)

LANGUAGE (#.85)                   DEFAULT LANGUAGE (#207)

NEW PERSON (#200)                 FACILITY ISO (#321.01)
                                  FACILITY CIO (#321.02)
                                  USER TO AUDIT:USER TO AUDIT (#.01)

OPTION (#19)                      ALPHA,BETA TEST OPTION:ALPHA,BETA TEST OPTION (#.01)
                                  OPTION TO AUDIT:OPTION TO AUDIT (#.01)

PACKAGE (#9.4)                    ALPHA/BETA TEST PACKAGE:ALPHA/BETA TEST PACKAGE (#.01)



INPUT TEMPLATE(S):
XU KSP INIT                   FEB 27, 1991@11:47  USER #0    
     This is used to edit KSP as part of the init.
XUAUDIT                       FEB 10, 1989        USER #0    
     This template allows the site manager to set up the various audits that
     s/he wishes to maintain.
XUSITEPARM                    AUG 04, 1994@12:31  USER #0    

PRINT TEMPLATE(S):
XUS-SPY-SHOW                  FEB 28, 1989        USER #0                                                                         @

SORT TEMPLATE(S):

FORM(S)/BLOCK(S):
XUAUDIT                       NOV 17, 1994@08:33  USER #0
  XUSITEPARM 0                  DD #8989.3
  XUSITEPARM 4                  DD #8989.3
  XUSITEPARM 4.1                DD #8989.36
  XUSITEPARM 4.2                DD #8989.35
  XUSITEPARM 4.4                DD #8989.33
  XUSITEPARM 4.3                DD #8989.34

XUER EDIT PARAMS              MAY 27, 2010@11:14  USER #0
  XUER EDIT BLOCK1              DD #8989.3

XUSITEIP                      FEB 18, 2003@15:52  USER #0
  XUSITEPARM 0                  DD #8989.3
  XUSITEIP 1                    DD #8989.3
  XUSITEIP 1.1                  DD #8989.305

XUSITEPARM                    NOV 16, 1994        USER #0
  XUSITEPARM 0                  DD #8989.3
  XUSITEPARM 1                  DD #8989.3
  XUSITEPARM 3                  DD #8989.3
  XUSITEPARM 2                  DD #8989.3
  XUSITEPARM 2.1                DD #8989.304
  XUSITEPARM 2.2                DD #8989.309
  XUSITEPARM 4                  DD #8989.3
  XUSITEPARM 4.1                DD #8989.36
  XUSITEPARM 4.2                DD #8989.35
  XUSITEPARM 4.4                DD #8989.33
  XUSITEPARM 4.3                DD #8989.34
  XUSITEPARM 5                  DD #8989.3

XUSSPKI                       MAY 05, 2003@10:22  USER #0
  XUSSPKI 1                     DD #8989.3